CVE-2023-25455: WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.6.0 - Arbitrary Content Deletion vulnerability
First published: Mon Dec 09 2024(Updated: )
Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.6.0.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| miniOrange Social Login for WordPress | <=7.6.0 | |
| WordPress Social Login and Register | <=7.6.0 |
Remedy
Update the WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin to the latest available version (at least 7.6.1).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-25455?
CVE-2023-25455 is classified as a Missing Authorization vulnerability, which can lead to unauthorized access due to incorrectly configured access control security levels.
How do I fix CVE-2023-25455?
To fix CVE-2023-25455, update the miniOrange WordPress Social Login and Register plugin to the latest version that addresses this vulnerability.
Which versions of miniOrange WordPress Social Login and Register are affected by CVE-2023-25455?
CVE-2023-25455 affects versions of miniOrange WordPress Social Login and Register up to and including 7.6.0.
What is the impact of CVE-2023-25455?
The impact of CVE-2023-25455 may allow attackers to exploit the missing authorization to gain access to sensitive functionalities.
Is CVE-2023-25455 remedied in future releases of the plugin?
Yes, CVE-2023-25455 is expected to be addressed in future releases of the miniOrange WordPress Social Login and Register plugin.
- agent/remedy
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/author
- agent/severity
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/miniorange
- canonical/miniorange social login for wordpress
- vendor/wordpress
- canonical/wordpress social login and register